HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
Yakima
bd_4a497dcb4db577a4 · schema v1 · pii pii-v1
Full breach record for Yakima →Yakima Valley Radiology PC reported an external system breach (hacking) occurring on August 11, 2023, discovered on January 31, 2024. The incident affected 235,249 individuals, including 52 Maine residents. Acquired data included names and Social Security Numbers. The entity provided written notification and offered complimentary credit monitoring through TransUnion.
Leak gap clock⏱ Leak >90d4 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 6 about the same incident.View merged incident
A leak claim by karakurt about this victim predates this filing by 161 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_cc5532a379a576f9Leak Sitekarakurtfiled 2023-09-22(161d gap)Verified by operator
Regulatory filings (4) · sorted by filing gap
- bd_669ed9fb5cf52f9aWashington State AGfiled 2024-03-01Candidate
- bd_6cf7c1905ae7540aCalifornia State AGfiled 2024-03-01Verified by operator
- bd_c504bbae05a11a5cVermont State AGfiled 2024-03-01Verified by operator
- bd_daf5c68726add594Oregon State AGfiled 2024-03-01Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ac9dc710-592c-4615-a6e2-a1d31265b4ed.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 1, 2024
- Raw hash
- b93a9d84b028ecd75add0dac56e6122d646198c4c27a9a29fe60fe463d8becfd
Reporting entity
- Name
- MCDONALD HOPKINS LLCnorm: mcdonald hopkins
Victim entity
- Name
- Yakimanorm: yakima
- Domain
- yakima.com
- Industry
- healthcare
Incident
- Discovered
- Jan 31, 2024
- Materiality determined
- —
- Notification sent
- Mar 1, 2024
- Affected individuals
- 235,249
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- Leak >90dME AG ≤30d · 30d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 31, 2024→ Filed with AG: Mar 1, 202430d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.